That's gonna be devastating to the three people who use Mail.app
That's not what the statistics say: https://emailclientmarketshare.com
Zero click vulnerability in Apple’s macOS Mail
61–70 of 269 posts
Re: Zero click vulnerability in Apple’s macOS Mail
#62Is it true that Apple devices are more secure than good Android devices(like Google's Pixel)? Or is it just security theater ?
Re: Zero click vulnerability in Apple’s macOS Mail
#63Ok, remind me never to approach Apple directly if I happen to find a vulnerability. Zerodium (or a 3-letter agency) it is!
From the wikipedia page for Meltdown: "On 8 May 1995, a paper called "The Intel 80x86 Processor Architecture: Pitfalls for Secure Systems" published at the 1995 IEEE Symposium on Security and Privacy warned against a covert timing channel in the CPU cache and translation lookaside buffer (TLB). This analysis was performed under the auspices of the National Security Agency's Trusted Products Evaluation Program (TPEP)."
i.e. did they know even in 1995?
Re: Zero click vulnerability in Apple’s macOS Mail
#64Earlier quoted context omitted.
Apple's entire business model is based on appearances. To be fair so is Microsoft's and many others. Security is usually the last priority for nearly every for profit entity because it doesn't drive revenue.
Apple puts rather extreme security effort into preventing iOS jailbreaks. They are pretty serious about trying to prevent data exfiltration from locked iOS devices as well. They aren’t perfect but I don’t think it’s fair to say they don’t try.
Re: Zero click vulnerability in Apple’s macOS Mail
#65Is it true that Apple devices are more secure than good Android devices(like Google's Pixel)? Or is it just security theater ?
On the Android side, Google makes good software changes to Android, but ultimately the security is dependent on the handset maker (e.g. Samsung) and SoC maker (e.g. Qualcomm). Security will vary between Android phones. The bigger Android phone makers are more able to make security investments than the cheaper phone makers.
Re: Zero click vulnerability in Apple’s macOS Mail
#66What could possibly go wrong? ;-/
Re: Zero click vulnerability in Apple’s macOS Mail
#67Earlier quoted context omitted.
A big difference is that the software running on Apple devices is less complex. For example there is significantly less hardware support. iMessage only talks to other iMessage instances (eg no browser support). There is only one web browser engine. Third party apps can't do JIT code generation. Older APIs are actively removed, breaking existing apps (vs providing backwards compatibility). In general less complexity i…
> Android had it since ~2012. I seriously wonder: what difference did it make? Was there any groundbreaking thing iOS users missed for 8 years? Apple is just great in omitting things and keeping focus to deliver a great product and then expand on that basis. Most famous example: First iPhones didn’t have MMS
Or cut and paste. ;-)
Re: Zero click vulnerability in Apple’s macOS Mail
#68Earlier quoted context omitted.
A big difference is that the software running on Apple devices is less complex. For example there is significantly less hardware support. iMessage only talks to other iMessage instances (eg no browser support). There is only one web browser engine. Third party apps can't do JIT code generation. Older APIs are actively removed, breaking existing apps (vs providing backwards compatibility). In general less complexity i…
> Android had it since ~2012. I seriously wonder: what difference did it make? Was there any groundbreaking thing iOS users missed for 8 years? Apple is just great in omitting things and keeping focus to deliver a great product and then expand on that basis. Most famous example: First iPhones didn’t have MMS
Re: Zero click vulnerability in Apple’s macOS Mail
#69Is it true that Apple devices are more secure than good Android devices(like Google's Pixel)? Or is it just security theater ?
https://qz.com/1844937/hong-kongs-mass-arrests-give-police-a...
Re: Zero click vulnerability in Apple’s macOS Mail
#70Earlier quoted context omitted.
A big difference is that the software running on Apple devices is less complex. For example there is significantly less hardware support. iMessage only talks to other iMessage instances (eg no browser support). There is only one web browser engine. Third party apps can't do JIT code generation. Older APIs are actively removed, breaking existing apps (vs providing backwards compatibility). In general less complexity i…
> Android had it since ~2012. I seriously wonder: what difference did it make? Was there any groundbreaking thing iOS users missed for 8 years? Apple is just great in omitting things and keeping focus to deliver a great product and then expand on that basis. Most famous example: First iPhones didn’t have MMS